SYSTEM AND METHOD FOR PROTECTING DIGITAL MEDIA 
BACKGROUND OF THE INVENTION 

1. Technical Field 

The present invention relates generally to security systems 
for digital recordings, and more particularly relates to anti- 
pirating schemes for controlling the copying, playing, and 
distribution of digital music. 

2 . Related Art 

The popularity of both the Internet and digital media 
technologies (e.g., compact disks "CD's" and digital versatile 
disks "DVD's") has created tremendous problems for copyright 
owners of digital media content. The ability to reproduce, play 
and transmit digital content has become readily available to 
anyone with a personal computer and access to the Internet. 
This ability has led to widespread abuses to the rights of 
copyright owners who are unable to stop the illegal reproduction 
of their works. 

One particular area where copyright ownership is 
particularly abused involves the music industry. The illicit 
pirating of digital music across the Internet is causing 
immeasurable damages to the music industry. Heretofore, most 
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music content has been packaged and stored in an open, unsecured 
format that can be read and processed by any digital media 
player or recorder, i.e., content can be readily reproduced, 
stored and transmitted. To address this, the music industry has 
5 sought to create a secure domain to control the rampant pirating 
of music. 

One solution the music industry is exploring involves 
establishing standards for secure playback and recording devices 
that process specially encoded content. Numerous secure devices 

10 and systems have been proposed. For instance, U.S. Patent 
5,513,260, issued on April 30, 1996, entitled, Method and 

Ji- Apparatus For Copy Protection For Various Recording Media, 
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y describes a system in which an authorization signature is 

3 required before a protected CD can be played. PCT application 

|§ WO 99/60568, published on November 25, 1999, entitled, Copy 

ijl Protection Using Broken Modulation Rules, also discloses various 

is! 

W ant i -pirating systems. Each of these references is hereby 
incorporated by reference. 

In addition, a group referred to as SDMI (Secure Digital 

20 Music Initiative) , made up of more than 180 companies and 
organizations representing information technology, consumer 
electronics, telecommunication, security technology, the 
worldwide recording industry, and Internet service providers, is 
attempting to develop standards and architectures for secure 
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delivery of digital music in all forms. Information regarding 
SDMI can be found at their website at <www.sdmi.org>. 

One of the challenges with implementing compliant systems, 
such as those sought under SDMI, is that various competing 
5 requirements must be met. For instance, under SDMI: (1) people 
must be allowed to make an unlimited number of personal copies 
of their CDs if in possession of the original CD; (2) SDMI- 
compliant players must be able to play music already in a 
library; (3) SDMI must provide the ability to prevent large 

10 numbers of perfect digital copies of music; and (4) SDMI must 

O 

U prevent the distribution on the Internet without any 

l . s 

^ compensation to the creator or copyright holder. Thus, SDMI 

ill 

l*J requires that a limited form of copying must be allowed, while 

in 

3 at the same time widespread copying must be prohibited. 

Unfortunately, such competing requirements create 

■S) ss. 

iff opportunities for hackers and pirates to defeat the protection 
Q schemes of the systems. Accordingly, protection schemes that 

are difficult to defeat, but will meet the open requirements for 

initiatives such as SDMI, must be developed. 

20 SUMMARY OF THE INVENTION 

This invention addresses the above-mentioned problems, as 
well as others, by providing a protection system and method that 
verifies ownership of a digital recording by requiring the 
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presence of the entire medium (e.g., CD), or entire collection 
of tracks, as they existed when the digital recording was 
originally distributed. 

In a first aspect, the invention provides a system for 
5 marking a digital recording, wherein the digital recording 
includes a plurality of tracks, comprising: a mechanism for 
dividing the digital recording into a plurality of sections and 
associating a random number to each section; a mechanism for 
calculating an identifier as a function of the associated random 
10 numbers; and a watermarking mechanism for watermarking sections 
1% within a block of sections, wherein the watermark for each 
jpSj section includes the random number associated with the section 
|;| and a portion of the identifier. 

~ In a second aspect, the invention provides a system for 

IS verifying a digital recording by ensuring a completeness of the 
tjj digital recording, comprising: a mechanism for reading 

watermarks from each of a plurality of sections on the digital 
recording and extracting a first and second part from each 
watermark; a mechanism for calculating a first identifier as a 
20 function of the extracted first parts; a mechanism for 

calculating a second identifier based on a block of the second 
extracted parts; and a mechanism for comparing the first 
identifier and the second identifier. 
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In a third aspect, the invention provides a program product 
stored on a recordable media for marking a digital recording 
having a plurality of tracks that, when executed, comprises: 
means for assigning a value to each of a plurality of sections 
5 within the digital recording; means for calculating an 

identifier as a function of all of the assigned values; and 
means for determining a watermark for each section within a 
block of sections, wherein each watermark includes the value 
assigned to the section and a portion of the identifier. 
10 In a fourth aspect, the invention provides a program 

^ product stored on a recordable media for verifying a digital 

sis 

J-S recording that, when executed, comprises: means for reading 

I y 

i ; f watermarks from each of a plurality of sections on the digital 
s recording and extracting a first part and a second part from 

|| each watermark; means for calculating a first identifier as a 

O 

M] function of the extracted first parts; means for calculating a 
53 second identifier based on a block of the second extracted 
parts; and means for comparing the first identifier and the 
second identifier. 
20 In a fifth aspect, the invention provides a method for 

preventing unauthorized use of a digital recording, wherein the 
digital recording includes a plurality of tracks, comprising the 
steps of: encoding the digital recording by partitioning the 
digital recording into a plurality of sections; generating a 
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random number for each section; calculating an identifier as a 
function of all of the generated random numbers; splitting the 
identifier into m partitions, wherein m is an integer; grouping 
the sections into blocks of m sections; and watermarking each 
5 section in each block with the random number for the section and 
one of the m partitions. 

In a sixth aspect, the invention includes a watermarked 
digital recording, comprising: a plurality of tracks; and a 
plurality of sections commingled with the plurality of tracks, 
10 wherein each section includes a random value and a value that is 
y dependent on the random values for all of the sections. 

-Ui 

! " BRIEF DESCRIPTION OF THE DRAWINGS 

ft 4 

fy The preferred exemplary embodiment of the present invention 

if! will hereinafter be described in conjunction with the appended 
lUl drawings, where like designations denote like elements, and: 

Figure 1 depicts a block diagram of a verification system 
in accordance with a preferred embodiment of the invention. 

Figure 2 depicts a graphical representation of a digital 
recording containing watermarked information in accordance with 
20 the invention. 
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DETAILED DESCRIPTION OF THE DRAWINGS 

1 . Overview 

The present invention provides a system and method for 
protecting digital recordings from illicit processing. The term 
"processing," as used herein, may include any type of 
reproduction, transmission, playback, modification, etc., of the 
digital content. The term "digital content" may include any 
type of information, data, music, video, multimedia, etc. that 
can be stored in a digital format. The described embodiments 
accomplish protection by requiring a complete data set of the 
digital recording to be present before processing can occur. 
For example, in the music industry, music is typically delivered 
on an audio CD that comprises a collection of tracks or songs. 
This invention would thus provide a system and method requiring 
the complete collection of tracks to be present before 
processing. Since illicit music copying is often limited to a 
small subset of the songs on a CD, the ability to illegally post 
and download individual songs from the Internet would be 
substantially limited. 

Accordingly, the exemplary embodiments described herein 
require the presence of the whole medium (or entire collection 
of data as originally distributed) at the time of processing as 
proof of legal ownership. If a portion of the medium is not 
present, the processing of the digital recording can be aborted. 


Although one important application of this invention relates to 
the delivery of music content, it should be understood that the 
invention has applications to any type of digital recording that 
has a plurality of tracks. For the purposes of this disclosure, 
u a plurality of tracks" shall be defined to include any digital 
recording that has more than one individually usable or 
desirable segment. 

2 . Exemplary Embodiment 

Referring now to the figures, Figure 1 depicts an anti- 
pirating system 10 for encoding and verifying a digital 
recording 12 having a plurality of tracks, such as a music CD. 
Encoding is accomplished with a watermark encoder 14, and 
verification is accomplished with a verification system 28. In 
this embodiment, verification system 28 is shown as part of a 
compliant device 26 (e.g., a CD recorder or player), but could 
exist independently from other components. 

Watermark encoder 14 receives digital recording 12 and 
generates a watermarked digital recording 24. Watermark encoder 
14 comprises various modules for encoding digital recording 12 . 
These modules include a sectioning mechanism 16, a random number 
generator 18, a hash function 20, a portioning function 22, and 
a watermarking system 23. The process of how these modules 
encode digital recording 12 is described in detail with regard 
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to Figure 2. Once encoded, a watermarked digital recording 24 
is provided, which can be distributed or sold to the general 
public in a format that will allow compliant systems, such as 
compliant device 26, to limit illicit processing. 

A compliant device 26, as shown in Figure 1, may include 
any type of system for processing watermarked digital recording 
24, e.g., a recording device for making copies of a watermarked 
CD. While there are no specific limitations placed on compliant 
device 26, it is understood that it generally comprises a system 
compliant with watermark encoder 14, i.e., it can analyze a 
watermark created by watermark encoder 14. Compliant device 26 
includes a verification system 2 8 for verifying watermarked 
digital recording 24, a processing system 38 for performing the 
actual processing operation of the digital recording (e.g., 
record/playback/ transmit) , and an abort system 40 for aborting 
processing when the inputted digital recording is not properly 
verified. 

Verification system 28 comprises various modules for 
verifying the watermark in watermarked digital recording 24. 
These modules may include a watermark extractor 30, a hash 
function 32, a coalescing function 34, and comparator 36. The 
operation of these modules is described in more detail below 
with reference to Figure 2 . 


Figure 2 depicts a watermarked digital recording 24 
comprised of: (1) a digital recording 12 having a plurality of 
tracks (Tl, T2 , T3...TN) , and (2) a plurality of sections 44 (SI, 
S2 , S3 ... Sn) that contain watermark information. The watermark 
5 information is commingled with the tracks such that each track 
has several sections of watermark information associated 
therewith. The placement of the watermark information along 
side the tracks may be accomplished in any manner known in the 
art . 

10 As noted, digital recording 12 comprises digital content, 

1% such as a music CD containing N songs. Watermark information is 
J!? stored in each of the n sections 44. Each section 44 includes 

TS pi? 

y an individual watermark element (R1D1, R2D2, R3D3 ...) that is 
s required to be present to verify any portion of digital 
flf> recording 24, Thus, if a section is missing, digital recording 
Vj 24 will not be verified. Accordingly, a single track (e.g., Tl) 
%J cannot be processed unless all of the other tracks are present. 
The sections are logically grouped into blocks of sections 46 
and 48, with each block containing m sections where m is any 
20 integer. 

The procedure for creating watermarked digital recording 24 
from digital recording 12 is as follows. First, sectioning 
mechanism 16 of watermark encoder 14 partitions digital 
recording 12 into a plurality of logical sections 44 (SI, S2 ... 
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Sn) , each of a predetermined length. For example, for a music 
CD, each section 44 may be approximately 15 seconds in length. 
Next, random number generator 18 generates an r-bit random 
number Ri for each section i. Each r-bit random number (Rl, R2 
... Rn) may be any size, but preferably comprises 4 to 16 bits. 
Next, a d-bit hash of these random numbers is generated by hash 
function 20. The resulting d-bit value, referred to herein as 
identifier D is given by D = H(R1, R2, R3...) , where H is hash 
function 20. Hash functions are well known in the art, and hash 
function 2 0 may comprise any function that can operate on the 
random numbers and generate a single value D, e.g., a sum value. 
The d-bit hash may be of any size, but preferably comprises 32 
to 80 bits of data. 

The next step is to split identifier D into m portions, and 
to map each of the rn portions into each block of sections 46, 
48. The splitting process is accomplished with portioning 
function "P" 22, where P(D) = Dl, D2 ... Dm. In the embodiment 
depicted in Figure 2, m=4, denoting that each block comprises 
four sections and identifier D is split into four portions. The 
d-bit identifier D may be split and mapped in any manner. For 
example, groups of bits ranging from least significant to most 
significant may be split into portions Dl, D2 , D3..JDm. It is 
understood that the number of sections w m" in a block can be any 
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integer, but preferably is between 1 and 16. In the case where 
111=1, each section is its own block. 

Once all the random numbers (Rl, R2 ... Rn) and identifier 
portions (Dl 7 D2 ... Dm) are calculated, each section is 
watermarked by watermark system 23 with: (1) the section's 
associated random number Ri, and (2) one of m identifier 
portions (Dl, D2 ... Dm) . In this exemplary embodiment, each 
section i is given a watermark WMi, where WMi = Ri D(l + (i mod 
m) ) . Thus, referring to Figure 2, a first block of sections 46 
are watermarked with R1D1, R2D2, R3D3, and R4D4; a second block 
of sections 48 are watermarked with R5D1, R6D2 , R7D3 and R8D4 ; 
and so on. In this exemplary embodiment, each of the identifier 
portions (Dl, D2...Dm) is mapped into a block using the "mod" 
operator. However, it is understood that any other method of 
mapping the D partitions into each block may be utilized. The 
result is a watermarked digital recording 24 that includes n 
watermarked sections commingled with the N tracks. 

Verification of watermarked digital recording 24 is 
accomplished by verifying that each of the n watermarks encoded 
by encoder 14 exist. Verification system 28 achieves this in 
the following manner. First, watermark extraction system 3 0 
opens an inputted digital recording, determines how many 
sections n' exist, and reads each of the n' watermarks. The 
random numbers (Rl', R2' ... Rn') and identifier portions (Dl', D2'... 
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Dm') are then extracted. Identifier portions (Dl', D2' ... Dm') may- 
be extracted on a block-by-block basis based on an inverse of 
the mapping formula used to map the portions into blocks by 
encoder 14 . 

Next, a first verification identifier D' is calculated by 
the same hash function 20 that was used by encoder 14. Thus, D' 
= H(R1', R2' ...Rn') . Then, a second verification identifier D" is 
calculated by coalescing function 34, which combines the 
extracted identifier partitions Dl', D2'...Dm'. Coalescing function 
34 operates in an inverse manner in which portioning function P 
22 splits identifier D. Accordingly, D" = P _1 (D1', D2' ...Dm'). 
Next, comparator 36 compares D' and D" to determine if all of the 
sections, and therefore the entire digital recording, is 
present. If D' is not equal to D", this indicates (1) that not 
all sections are present or (2) that some of the sections have 
been modified, and abort mechanism 4 0 will abort the processing. 
If the entire digital recording is present, processing system 3 8 
will proceed with the desired processing (e.g., 
record/playback/transmit) . 

The proposed system and method is effective since if one or 
more section is changed or left out, the verification system's 
hash calculation D' = H(R1', R2' ...Rn') will be different from the 
encoder's hash calculation D = H(R1, R2 ... Rn) , and therefore not 
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match with the extracted and combined identifier D" = P _1 (D1', D2' 
...Dm') . It is of negligible probability that a collection with 
missing, altered, or replaced sections will provide the same 
hash value as the original content . 

If the identifier D is split into m parts, these parts 
reoccur periodically, and the number of possible different 
watermarks is nv2 r , where r is the number of bits in each random 
number. Accordingly, even if a few sections have the same 
watermark, the system is still effective as long as most of the 
watermarks are different. (Otherwise, a subset of sections 
could falsely prove the presence of the whole CD content.) If 
there are 300 sections on a given music CD, it is relatively 
easy to achieve an implementation wherein almost all watermarks 
are different (e.g., m = 5, r = 6 will achieve over 300 
watermarks) . 

The length of the watermark r + d/m can be freely chosen, 
but should be chosen to prevent substitution attacks using 
sections from other CD's kept in a manageable size pre- 
calculated table. The following parameters can be freely 
chosen, but have preferred ranges and values as follows: r = 
4...16; d = 32...80; m = 1...16; m-2 r > 300; and r + d/m > 16. 

It is understood that systems, mechanisms, and modules 
described herein can be implemented in hardware, software, or a 
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combination of hardware and software. They may be implemented 
by any type of computer system - or other apparatus adapted for 
carrying out the methods described herein. A typical 
combination of hardware and software could be a general -purpose 
computer system with a computer program that, when loaded and 
executed, controls the computer system such that it carries out 
the methods described herein. Alternatively, a specific use 
computer, containing specialized hardware for carrying out one 
or more of the functional tasks of the invention could be 
utilized. The present invention can also be embedded in a 
computer program product, which comprises all the features 
enabling the implementation of the methods and functions 
described herein, and which - when loaded in a computer system - 
is able to carry out these methods and functions. Computer 
program, software program, program, program product, or 
software, in the present context mean any expression, in any 
language, code or notation, of a set of instructions intended to 
cause a system having an information processing capability to 
perform a particular function either directly or after either or 
both of the following: (a) conversion to another language, code 
or notation; and/or (b) reproduction in a different material 
form. 

The foregoing description of the preferred embodiments of 
the invention have been presented for purposes of illustration 
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and description. They are not intended to be exhaustive or to 
limit the invention to the precise form disclosed, and obviously 
many modifications and variations are possible in light of the 
above teachings. Such modifications and variations that are 
apparent to a person skilled in the art are intended to be 
included within the scope of this invention as defined by the 
accompanying claims. 
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